Changelog.

Update the CSP headers so that media files work properly in production. (Dev env didn’t care about this, so went under the radar)