Update documentation with required Content-Security-Policy

[johanflikweert]

In order to function, this widget requires external content. If the HTTP Header Content-Security-Policy is set, the following part should be added: script-src https://www.google.com/recaptcha/api.js https://www.gstatic.com