also consider reverse proxy configuration of realm