Self-signed certificate
Add STS header