Add Content-Security-Policy header for Firefox
Merge pull request #31 from ministryofjustice/http-headers

Add Content-Security-Policy header for Firefox