Add CSP handler setting

[GertBurger]

Fixes #397

This PR adds the SAML_CSP_HANDLER setting so that users can specify how CSP should be updated, if at all. The default behaviour of using django-csp remains the same.