update CSP rules

* Adds newrelic's shitty beacon stuff
* Fixes google analytics so its HTTPS
* Removes raw.github.com over plain text (wtf)
* Removes AMO stuff like recaptcha and tabzilla
* Fixes bug 978243 too