TASK: CSP: validate_directive now returns bool and reason; working on #5.

Issue #5 addresses tbe issue to make validate_* to return (valid, reason)
so that tickets like #2 can be easily implemented - that require csp
validator to return custom reason (e.g. "unsafe-inline" is not safe).