Add the API host to the content-src CSP
Add the API host to the content-src CSP

This removes warning messages from our CSP setup when we connect to a
third part host

ilios/frontend,thecoolestguy/frontend,djvoa12/frontend,jrjohnson/frontend,gabycampagna/frontend,jrjohnson/frontend,stopfstedt/frontend,thecoolestguy/frontend,gabycampagna/frontend,stopfstedt/frontend,gboushey/frontend,dartajax/frontend,djvoa12/frontend,dartajax/frontend,ilios/frontend,gboushey/frontend