updated CSP to whatever will be internally used by the chrome app.
(see https://developer.chrome.com/apps/contentSecurityPolicy for more details)

sending an ajax call to google+ api to get user email id.