sinatra xss protections preventing requests because of nginx frontend