tweaked nginx.conf: allow only GET, POST, HEAD requests, do not expose server name