HSTS header should not be set for .onion domains

WIP... HSTS (HTTP Strict Transport Security) should not be set on server side, in the TOR configs given freedombox relays on the inexistance of certificate for installation. Given when HSTS is set server will redirect to error page not loaded, not giving the user to add certificate exeption through advanced options