Node.js middleware to add Strict-Transport-Security header