More thoughts/notes on forward proxying.  There will be more as I work through
the initial forward proxy support.
Move the "have authenticated" check into forward/reverse specific callbacks;
they will have their own criteria for answering that question.