removes content security poliy