set CSP for chrome (non-prefixed); updates to readme