Add includeSubDomains to HSTS header