add comment for enabling HSTS