Remove URL path from the Chrome CSP in development

For some reason this fails to inject scripts in Chrome (38.0.2125.122)
due to CSP violation even though the two paths appear to match. Removing
the path from the host/port seems to fix the issue.
Merge pull request #1702 from hypothesis/fix-chrome-extension-csp

Remove /assets from the Chrome Extension CSP policy