finalized code for user workflow via angular, included nginx, converted all external facing content to use subdomains(!). acg is now firewall friendly