API Gateway: OAuth authorization server cannot use external CSS