fix CSP & updated method signature in nginx config; minor edits to notes