update content-security to be SSL.