Update vulnerableForm.php

Update csp switch statement so that csp header is transfered to secondary request