Johan Jonk Stenström Cookies and Content Security Policy