Activate HSTS security headers

SciPost_v1/settings/base.py

@@ -188,6 +188,9 @@ MIDDLEWARE = (
 )
 
 SECURE_BROWSER_XSS_FILTER = True
+SECURE_HSTS_SECONDS = 60
+SECURE_HSTS_INCLUDE_SUBDOMAINS = True
+SECURE_HSTS_PRELOAD = True
 
 ROOT_URLCONF = 'SciPost_v1.urls'