wip csp & cors
Merge branch 'master' of github.com:deian/nsdi2014