Content security policy

* Uses Guard to implement a Content Security Policy
* Fixes webassets to be compatible with the default CSP

Closes #5