removing copy-pastes "unsafe-eval" option from CSP in manifest.json, we do not use/need it