It worked like a charm, but it's little bit strange that there is no mention of perm. denied in error log (last entries are from two days ago, and also i just turned off rails servers and upstream error is logged correctly in error.log).

Whatever, tx again.