url checks now moved into proxyauthurl