mozilla/fxa-content-server — pull request #1615 by zaach (2014-09-02 19:12:54+00:00)
Title: fix(hsts): force hsts headers and use milliseconds

helmet API changes require us to set `force: true` or else the header won't show up. In addition, `max-age` uses milliseconds now.

@ckarlof r?