updated nextconfig with csp policy. wow i don't like writing those :)