amend CSP checks to work with CSP 1.0 header