OfficeJS: support flaskdav cookies authentication OfficeJS: add Content Security Policy configuration