CSP headers update