updated nginx config to allow CORS requests