Adding Content SEcurity Policy