Using HSTS for Better Security — and a Better Developer Experience