can you explain this to me?  proxy does not have a URL "/auth/cloudfoundry", it only has "/auth/cloudfoundry/callback".  so how does this work?

also, someone insert the original request into the callback URL (see my comment regarding redirect to "/" at the bottom).