Remove security through obscurity measures: URL is public.
Remove /nelmio from CSP report path.
Merge pull request #3 from SURFnet/maintenance/nelmio-security

Remove security through obscurity measures: CSP URL is public.