Fresh develop install gives me the following:

2016-10-12T21:03:33 e6772d1e [app] [F]
21:03:33 rails.1 | | SecureHeaders::ContentSecurityPolicyConfigError (Unknown config directive: image_src=["http://localhost:3808"]):
21:03:33 rails.1 | | app/controllers/application_controller.rb:412:in `allow_webpack'
21:03:33 rails.1 | | app/models/concerns/foreman/thread_session.rb:32:in `clear_thread'
21:03:33 rails.1 | | lib/middleware/catch_json_parse_errors.rb:8:in `call'
21:03:33 rails.1 | | lib/middleware/tagged_logging.rb:18:in `call'

We might need to change image_src to img_src