Fix HSTS by cloning add_header directives into locations.

Kinda stupid that nginx won't inherit it from server.