Ring middleware for Content-Security-Policy