Correcting header value and implementation of report-uri

Report-uri was inconsistent with the header values specified by CSP documentation:
https://developer.mozilla.org/en-US/docs/Security/CSP/CSP_policy_directives#report-uri

It should post a header value of report-uri rather than reportUri

Also the option was mismatching latest Kraken docs under middleware: 
```
report-uri - URI the browser should send the report to.
```