Add Content Security Policy header

[philpursglove]

Add Content Security Policy http header - see https://scotthelme.co.uk/content-security-policy-an-introduction/

Extend the existing SecurityHeadersFilter to add a Content Security Policy header