fix get dest. secure update. enable CSP