Adding connect-src to CSP headers

@rev amcculloch@
@bug W-2234931@
Merging origin/fabbott/master-pending/csp into master