Updated csp and headers

components/homepage/login.js

@@ -124,16 +124,16 @@ let Login = (props) => {
     // const [showSpinnerState, setShowSpinnerState] = useState(false);
     const [validLoginID, setValidLoginID] = useState(null);
 
-    console.log(
-        "built login url path:",
-        props.govGateway.config.authorization_endpoint +
-            "?response_type=code&scope=openid&client_id=" +
-            GG_CLIENT_ID +
-            "&redirect_uri=" +
-            GG_REDIRECT_URI +
-            "&ui_locales=" +
-            (router.locale == "cy" ? "cy" : "en-GB")
-    );
+    // console.log(
+    //     "built login url path:",
+    //     props.govGateway.config.authorization_endpoint +
+    //         "?response_type=code&scope=openid&client_id=" +
+    //         GG_CLIENT_ID +
+    //         "&redirect_uri=" +
+    //         GG_REDIRECT_URI +
+    //         "&ui_locales=" +
+    //         (router.locale == "cy" ? "cy" : "en-GB")
+    // );
 
     // let spinnerState = () => {
     //     showSpinnerState == true

components/tracking/index.js

@@ -1,8 +1,9 @@
 import React, { Fragment } from "react";
 
-export const Tracking = ({ googleTagManagerID }) => (
+export const Tracking = ({ googleTagManagerID, nonce }) => (
     <Fragment>
         <script
+            nonce={nonce}
             dangerouslySetInnerHTML={{
                 __html: `(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
 					new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],