use proxy_set_header instead of add_header