chore(Grunt): use the latest Content-Security-Policy header in csp mode