ContentSecurityPolicy - Enforce (temporary)

Feature to enforce CSP across all Apps.

By default, each CSP can be enabled selectively, for example only for visitors but not for admins.

This can be usefuly in scenarios where the Admins need special features which have not been properly white listed. 

When this feature is enabled, all users will get CSP enforced, without exceptions.