Our favorite three-headed authentication proxy