Update content security policy rules

Allow omdb, media-imdb and firebase sources
Add firebase cdn as script src
Merge pull request #3 from ember-montevideo/content-security-policy

Update content security policy rules
Take special care of movie rating values when they're not set.