Added CSP headers for img-src and frame-src, refs #17

Fixes #17