Strict Transport Security (HSTS)

[aaronERA]

Strict-Transport-Security header not implemented.

Add HSTS. Consider rolling out with shorter periods first (as suggested on [https://hstspreload.org/](https://hstspreload.org/#deployment-recommendations)).