add default-src
better warnings on invalid CSP directive arguments
test CSP 1.1 syntax
configure DJango console logger for tests