Add secure headers decorator
Add report-only CSP header