environment.js: update content security policy
app.css, user/index.hbs - big design update