updated packages to remove vulnerabilities and added content security…

[bcstryker]

… policy to next config

for the record, I don't think this will stop DDoS attacks, Vercel should handle that automatically or at least be able to help us if that becomes an issue, but in being threatened I thought it would be a good idea to fix what we can.