[bug959297v2] - Added CSP into middleware and app. Added hood module to package

[bug959270v2] - Added middleware into app

[bug959270v2] - Added one more policy to script, but it uses eval().

[bug959270v2] - Added more policy sources.

[bug959270v2] - Added more sources to policy; added unsafe-eval

[bug959270v2] - added more sources to the policy, fixed indentation, added 'unsafe-inline' to script policy