Make API available on it's own domain.

The API is now available on sub-domain api.* while the web app is
on www.*.
Move docs to it's own subdomain.

* Shift responsibility for CORS from API server to nginx API vhost.
* Introduce docs subdomain for hosting swagger spec and swagger ui.
* Disabled nginx sendfile due to strange caching problem.