removed deprecation warnings and added HSTS to nginx config