raise max-age for HTTP Public Key Pins from 5 min to 1 hour