Updated gems
Temporary disabled csp until we have a proper report_uri route