Add CSP headers to get rid of console warnings