removing inline JavaScritp from tests/index.html
adding CSP policy to test/index.html (via meta tag) and server.js
fix typo in CSP policy: missing single quote for 'unsafe-eval' directive
merge in master, fix typ in tests index
Merge pull request #93 from mozilla/remove-inline-js-from-tests

removing inline JavaScript from tests/index.html & adding CSP to the test server