add CSP requirements document