Should this be right that only logged in users can use the proxy? Otherwise how is the security of this proxy solved so that no arbitrary user can hijack the proxy to send information via the gallery software?