nginx config: fix the fix the access-control-allow-origin header