remove verifyCSP method.  no useful now.