Loosen Content Security Policy so that Google Analytics and New Relic load on the staging server. #33.