Update nginx.conf to add a CSP, and hopefully improve performance

Use of sendfile should improve performance of serving static files.

Relatively lax CSP should provide extra security without breaking everything.