add option to trust reverse proxy for basic auth