added HSTS bypass as demonstrated by Leonardo Nve at blackhat