Fix #205 Adopt CSP and HSTS