Fix the typo to make header "Content-Security-Policy"

Fixes https://github.com/playframework/playframework/issues/2650