https://rifco.ru/blog/2016/09/10/http-strict-transport-security/