fix nginx.conf, deny access to ./themes/*/views dirs