check csp and security dashboard before first release

before release and deploy to textgridrep.org the following should be done:

check https://observatory.mozilla.org/analyze/textgridrep.org and evaluate implementation of csp

also look into security dashboard and fix some issues