Google One Tap CSP allowance

Allowed accounts.google.com in the content security policy so the Google One Tap prompt can load instead of being blocked by production headers.