fix(hsts): force hsts headers and use milliseconds