Content security policy upgrade insecure requests htaccess July 8, 2019 16 32 64 128 Header always set content security policy upgrade insecure requests .htaccess Content spoofing poc