Enforce strict content security policy (#117).
Secure server-sent events (#117).
Small refactoring.
Verify and clarify authorization procedures.
Merge pull request #118 from christophemarois/strict-csp

Strict csp