fix(csp): turn on report only mode until CSP issues are resolved