fix($parse): add `.assign()` function to settable expressions in CSP mode

Also fixes the test suite, which was not actually taking CSP-mode paths when
we were expecting it to.

Numerous CSP-mode tests are failing, working on fixing these.
wait, actually I'm wrong, it does get the value immediately