Adapt headers to using Content Security Policy
Document Content-Security-Policy changes
Fix bug in example, describe CSP more
Handle CSP Reports
Log CSP violations via report
Set default policy to nothing, only report.
csp_report_uri caused a cyclic dependency
Log reporter policy to debug
Load the security service handlers.

Conflicts:
	IPython/html/notebookapp.py
Restrict frame-ancestors to 'self' in CSP
Clean up logs, enable debug log for header except
One unified CSP report URI
Turn x-frame-options tests into CSP tests
Remove CSP reporting since it fills console.
Report CSP violations as warnings.
Clean up default content security policy setup
Document the report-uri endpoint in whatsnew
Update CSP tests for new default.
Remove extraneous pass

YOU SHALL NOT PASS!
I rap fast like Shadowfax!
Log warning directly.