Enable CSP in report only mode for the main web site