Code from my X-Wow-Security-Header talk
Add CSP report-uri