update nginx.conf: bump session + HSTS timeouts