numerous documentation formatting fixes and reference updates
remove obsolete CSP headers, leave only Content-Security-Policy