add cors to nginx-ssl