add websocket support
add option to not add 'self' to CSP
add CORS plugin
bump version number