Copy pattern for delegating auth to the api, skipping basic auth, from the LMS to CMS

(cherry picked from commit 43d85953)

playbooks/roles/nginx/templates/edx/app/nginx/sites-available/cms.j2

@@ -123,6 +123,13 @@ error_page {{ k }} {{ v }};
     try_files $uri @proxy_to_cms_app;
   }
 
+  # The api is accessed using OAUTH2 which
+  # uses the authorization header so we can't have
+  # basic auth on it as well.
+  location /api {
+    try_files $uri @proxy_to_cms_app;
+  }
+
   {% include "robots.j2" %}
   {% include "static-files.j2" %}