Add a note about HSTS in the README