Serve login-only file using Nginx and X-SendFile