Do not send CSP for Android Browser < 4.4.

Android Browser < 4.4 doesn't simply silently fail when CSP headers are sent, as one might expect. It just doesn't load _any_ resources.