CSP support

Support for CSP 1.0 header as discussed in #4