CSP: Drop RFC2616 in favor of RFC7230 and RFC7231.