openvibe.tips's CSP allows Cloudflare Web Analytics' beacon (it was refused in every visitor's console) (#82)

ddiff --git a/server/app.js b/server/app.js
iindex 4a185aa..c100186 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -90,8 +90,8 @@ function createApp(opts = {}) {
          // Pages frame nothing but the Network's /sso/check; overlays are loaded by OBS, not framed by sites.
          // connect-src openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 1.17).
          res.setHeader('Content-Security-Policy', [
--            "default-src 'self'", "script-src 'self' 'unsafe-inline' https://openvibe.network", "style-src 'self' 'unsafe-inline' https://openvibe.network",
--            "img-src 'self' data: https:", "media-src 'self' https:", "connect-src 'self' https://openvibe.network https://openvibe.events", "frame-src 'self' https://openvibe.network",
++            "default-src 'self'", "script-src 'self' 'unsafe-inline' https://openvibe.network https://static.cloudflareinsights.com", "style-src 'self' 'unsafe-inline' https://openvibe.network",
++            "img-src 'self' data: https:", "media-src 'self' https:", "connect-src 'self' https://openvibe.network https://openvibe.events https://cloudflareinsights.com", "frame-src 'self' https://openvibe.network",
              "frame-ancestors 'self'", "object-src 'none'", "base-uri 'self'", "form-action 'self' https://openvibe.network https:",
          ].join('; '));
          next();