CSP headers modified

should solve #381