Strict-Transport-Security preload

```
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
```

See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-Security#preloading_strict_transport_security