fix(csp): turn on report only mode until CSP issues are resolved
Merge pull request #1255 from mozilla/csp-report-only

fix(csp): turn on report only mode until CSP issues are resolved.

I'm going to merge this until we have all the problems figured out. Thanks @zaach!