Enable CSP support for /_utils per default

With the new 2.0 release Futon, which had too much inline-
JavaScript etc., is not used any more. Fauxton is able to work
with our default CSP settings.