nginx: add TLS_FALLBACK_SCSV, kill server header