Set CSP header for index.html

Fixes https://github.com/vole/vole/issues/43