Basic auth

rack-reverse-proxy supports basic auth, so this essentially passes on a config.

The `preserve_host`-option is also important, as the cluster can be running behind something that cares about the host. 
Prefix these with elasticsearch_, eg `elasticsearch_user`