kibana: Restrict URLs proxied without authentication

Use a RewriteRule rather than ProxyPass so that only the single desired
URL is proxied to the Elasticsearch backend.

Change-Id: I53bd9f97be6f26d5d97c445c1ee3fee86c8f8063