Swagger behind nginx allow access control origin