Adjust Content-Security-Policy

* Allow img-src data:... for css sprites
* Allow style-src unsafe-inline for jQuery and Modernizr feature
  detection

Change-Id: I1dfd90d82f6d33d19a0530d0933f6cb48ecc538a
Merge "Adjust Content-Security-Policy"