changed content security policy header to report only
Merge pull request #82 from LA1TV/master

changed content security policy header to report only