Move PURGE http verb filtering into nginx

Rather than preventing external PURGE requests in Varnish handle it in
the externally facing Nginx vhost.

Checking that a request came through Nginx by checking for the presence
of a header that it sets is horribly opaque.