Removed X-CONTENT-SECURITY-POLICY header
Merge pull request #2674 from mkurz/removed_x-content-security-policy

Removed "X-"Content-Security-Policy header - it's a mess