Moved all the HSTS logic from cookiestore.js to hsts.js,
added more comments and refactored a bit. No functionality changes.