Setting Access-Control-Allow-Origin header in nginx for benefit of cross-domain fonts