Update nginx.conf

Author: Nilanth

nginx.conf

@@ -1,3 +1,8 @@
+server {
+add_header X-Frame-Options "SAMEORIGIN";
+add_header X-XSS-Protection "1; mode=block";
+add_header X-Content-Type-Options "nosniff";
+
 location / {
     # try to serve file directly, fallback to rewrite
     try_files $uri @rewriteapp;
@@ -12,4 +17,5 @@ location ~ ^/index\.php(/|$) {
     try_files @heroku-fcgi @heroku-fcgi;
     # ensure that /index.php isn't accessible directly, but only through a rewrite
     internal;
+    }
 }