Ease down CSP for localhost API

[Joozty]

Currently, the dashboard doesn't work very well with API when running on localhost. It's because of our strict CSP rules. All stuff which is in iframes fails. We should somehow solve this. Maybe generate these HTML templates via webpack or create one template for production and one for dev? 🤔