Explicitly control nginx dhparams

We want to ensure that any client that falls back to DH gets a
reasonably strong encryption experience. Default for nginx is 1024 bits
which is too weak.
Merge pull request #636 from alphagov/feature/diffie-hellman-bits

Explicitly control nginx dhparams