bugs in nginx config for symfony, also protect from upload attack