Fix: send CSP header in fatal error pages too.