autocomplete off and no server tokens from nginx