refined the CSP headers