Send the Content Security Header to prevent CSS