Deeply changed to support cookies and limit to X-Proxy-URL usage