added CSP support. fixes #2.