add charset, 403; change worker_processes