Moving Duo.Init to Duo-Init.js so script-src 'unsafe-inline' is not required in a site's Content Security Policy
Updating demos/simple/index.php to Duo-Init.js so script-src 'unsafe-inline' is not required in a site's Content Security Policy
Merge pull request #4 from sedward5/remove-unsafe-inline

Support CSP without unsafe inline