https://mamchenkov.net/wordpress/2017/05/23/using-the-strict-transport-security-header/