make puma socket group writable for nginx