added access control wildcard to nginx config