Use https for cloudflare in csp settings