[WIP] Add report-uri

Fixes #12 

* Adds a `report-uri` header which defaults to host:port.
* Now just silently returns `{"status":"ok"}` to all requests on `/csp-report`
Something like:

```javascript
app.use('/csp-report', function(req, res) {
  res.send({status:'ok'});
});
```