raise max-age for HTTP Public Key Pins from 3 days to 2 weeks