Converts Content Security Policy to report only
Converts Content Security Policy to report only

We've seen so many issues with CSP & all the hashes/etc. Let's just
convert to report only until later on.

dgattey/dg,dgattey/dg,dgattey/dg