update nginx config for security