Add HSTS header if SSL is used