adding a basic CSP header