wms proxy

DO NOT MERGE or MERGE AT YOUR OWN RISK!

Down the rabbit hole, a suggested fix for #946. I saw that authenticated geoserver requests go via the proxy controller, so why not just run them all through?

Have a crack at:
http://dfruehauf.emii.org.au

Still more work to be done here. I think that in general there should be a designated `openlayers` proxy in addition to the ProxyController.
An implementation of `Portal.utils.Url.proxy()` could simplify this to:

```javascript
return Portal.utils.Url.proxy(collection.wmsLayer.getWmsLayerFeatureRequestUrl(params.format));
```