A simple nginx conf file to allow your backend (Varnish, Apache Traffic Server, etc) to not worry about CSRF tokens and put the onus on the front (nginx) instance