[bug959297v2] - Added CSP into middleware and app. Added hood module to package

[bug959270v2] - Added middleware into app
[bug959270v2] - Added one more policy to script, but it uses eval().