Updated data layer, routing, and readme. Integrated Content-Security-Policy HTTP header.