Nonce it, nonce it good

Added some content for a csp/misconfiguration "attack". I tried adding a test, but it doesn't look like phantomjs was honoring it. Tests pass, just no new test.

I didn't add the language around an actual tutorial tho :ear: 

I pointed livereload at a branch I made a loooong time ago. Fixes the livereload issues w/ inline script.