fix CSP for Fauxton dev mode

fix CSP for Fauxton dev mode