Fixes a huge problem where a nginx variable was not escaped and nginx was adding the literal string "always" to all requests. The most obvious result was that basic auth was entirely broken. Signed-off-by: Carson Anderson <ca@carson-anderson.com>