relax CSP to allow OSM images