owncloud: set forcessl to be true to get the corret HSTS header (would be better if we could prevent ownCloud from sending one)