adding info on CSP middleware