add CORS headers to nginx config so conservative browsers will show tiles