Relax CSP for connect-src