chore(revproxy): enable proxy to wts agg authz (#2007)

Co-authored-by: John McCann <johnmccann@uchicago.edu>

kube/services/revproxy/gen3.nginx.conf/arborist-service.conf

@@ -54,7 +54,7 @@ location = /gen3-authz {
 # authorization endpoint
 # https://hostname/authz?resource=programs/blah&method=acb&service=xyz
 #
-location ~ /authz/? {
+location = /authz {
     if ($csrf_check !~ ^ok-\S.+$) {
         return 403 "failed csrf check";
     }