Add `underscores_in_headers` to the nginx config

This allows for passing the `remote_user` header from shib to the app
servers