Update CSP policy to account for Persona on every page

Update CSP policy to account for Persona on every page

Now that the Persona scripts are loaded from every page, our CSP
policy can be a lot simpler.

(This is of course not necessarily an improvement because it's
both simpler and less strict.)