add an http->socks5 proxy implementation

this is useful so that a standard `ssh -D 1080` will let you gateway
into your private openstack cluster