Removed CSP headers from index.html endpoint, when server is in DEV mode.

I do believe that it was just a typo, and intention is to NOT add CSP headers for DEV mode. If I am right, please merge this it.