update CSP settings to recommended values