Turn on HSTS on the facilitator

Document how to do it in facilitator-howto.txt.

https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security https://tools.ietf.org/html/rfc6797