Check that spy.proxy is an actual spy before use

This prevents problems when the object spied upon has a `proxy` method that isn't a spy.  For example, controllers from Spine.js.
Add regression test for #19.