Remove mistaken * from img-src

* is a wildcard and made img-src allow anything, thus being pretty much
useless. Not terrible for images, but I'd rather have a stricter CSP
Use Article Title where available in both initial load and ajax requests.

Use {article's title} | {site's title} in <head> <title>