fixes #58 - Firefox >= 23 supports standard CSP header