add open.mapquestapi to default-src csp