Better handling of big archives

see https://mattspitz.me/2013/11/20/serving-authenticated-media-with-nginx.html