CORS & CSP Security Auditor API