upgrade django-csp; bug 1009196