Fix bad link in README

Closes #78.
Move CSP into its own middleware

Closes #69.
Update HISTORY