only proxy urls which /begin/ with the auth string