CSP headers rewrite