Add possibility for transmitting the X-WebKit-CSP header (issue #33).

Proposed implementation of issue #33. I left out the detection of Safari, since this is quite unreliable on the server-side using the user-agent string. If this fix looks good to you, I'll send a pull request updating the documentation.