fixed image duplication method. perhaps revisit it later for optimization and refactoring
Relaxed content security policy to load the dropbox dropin.js api feature