added unsafe-inline for CSS in CSP