2.3.4 (2025-10-14) Bug Fixes csp headers upgrade-insecure-requests cause browser to attempt https, removed. fixes #434 (#435) (ac87aaf)