Content-Security-Policy in ASP.NET MVC