Use Nginx to block non-GET requests

[debuggingfuture]

since we plan to have direct access from client side
@hkkenneth
http://www.elasticsearch.org/blog/playing-http-tricks-nginx/