[bug959297v2] - Added CSP into middleware and app. Added hood module to package

[bug959270v2] - Added middleware into app

[bug959270v2] - Added one more policy to script, but it uses eval().

[bug959270v2] - Added more policy sources.

[bug959270v2] - Added more sources to policy; added unsafe-eval