added notes about nginx non root user