nginx: document how to enable CORS support