sed_https(): Also update csp->https_headers->first which may have been changed by...