updated style CSP and removed <style>s from responses