Add link to change password
Enable content security policy headers