fixed #748 HSTS header