created simple CSP http header
Merge pull request #2 from lemind-timer-secure-fixes/CSP_header_fix

simple CSP http header