Removed CSP by default since node is only serving our API requests;