Update CSP headers