better session handling; support for arbitrary headers in client; smarter cookie handling in proxy