Content security policy allows for connection to firebase