Nginx redirect should be reinstated to all paths except the API
Description
After this PR we return 400 error code if external SSL is enabled, no matter the path. But this is wrong for most use cases (composer, UI, etc). So let's revert to redirecting via 308, and only return 400 for api calls.