Set Strict-Transport-Security header if NOTIFIER_FORCE_HTTPS is true
Account for wss:// in content security policy header