ability to manage csp headers for static sites