fixes to nginx/ssl