properly anchor the rewrite rule that replaces proxypass