add optional content security policy header
Merge pull request #413 from EiNSTeiN-/master

Add optional content security policy header