set CSP in local test server