Nginx does not play nicely with vary headers (plus suggested workarounds) (trac.nginx.org)