With Content Security Policies activated, swagger (and redoc) auto-generated API documentation is no longer accessible even locally. To restore this feature, we've excluded CSP for related URLs only in the `Development` configuration.