http-reverse-proxy with passport auth