Nginx: Add Access-Control-Allow-Origin header also for static .json requests.
Nginx: Protect also .md files in modules|themes|libraries dirs.