modified CSP header