listen on both ports 80 and 443, use HSTS.
listen on both ports 80 and 443, use HSTS.

Switch to manually set headers instead of using koa-helmet, security  headers per end-point.

shapesecurity/salvation