Storing Content-Security-Policy reports in elmah.io

While the Content-Security-Policy-Report-Only header is great, you probably want to run with that in production before actually switching to Content-Security-Policy.