Updated CSP header usage for different browsers

Make it consistent with https://www.owasp.org/index.php/Content_Security_Policy