rely on Strict-Transport-Security headers for ssl redirect