adds 'unsafe-inline' security policy for style-src

necessary for datamaps