tweak nginx config; remove hotlinking prevention