Removed colon from Content-Security-Policy directive

Content-Security-Policy directives **do not work with colons**.
I testet it in Chrome and Firefox and both reported errors.
Without the colons it worked as expected.

For correct usage have a look at the examples here:
http://content-security-policy.com/ (at the bottom of the page)
http://www.html5rocks.com/en/tutorials/security/content-security-policy/