Allow extending javascript static config
Take an array of layouts instead of a Hash
Update CSP to allow frames of origin 'self'