fix route, use x-accel-redirect in production