proxy - always adding extra sec-proxy header - closes #509