add client_max_body size to ssl, use params rather than hardcoding value