update README to reflect set_csp_header preferred API