add unsafe-inline csp for twitter and bootstrap
more comments for csp