chore(server.js): Add CSP support

The support is disabled by default, uncomment relevant lines to enable
it.