Alpha Release v0.2.8

• Fixed map http problem
• Fixed flake8 compliance
• Set both child-src and frame-src in content security policy
• Added a web app manifest and dummy service worker (which may not be working quite right...)