Fix CSP header issues