Simplify CPS model for manifest (closes #259)

 * no longer allow the manifest to have a different policy. Depend's on owner document's CSP.
Merge pull request #260 from w3c/csp

Simplify CPS model for manifest (closes #259)