HTTP security header audit for any URL - HSTS, CSP, clickjacking, referrer policy, cookies and a letter grade