add CSP url for https google analytics
Merge pull request #397 from Sancus/master

fix csp for GA