Remove /assets from the Chrome Extension CSP policy

For some reason this fails to inject scripts in Chrome (38.0.2125.122) due to CSP violation even though the two paths appear to match. Removing the path from the host/port seems to fix the issue.