remove extra CSP header as we no longer support IE