bump jquery and get working CSP