6ec259
Set unsafe-inline content-security-policy for script-src on /login when auth provider is fas or openid