added CSP policy fix for development
fixed paths for tests