proxy through nginx and enfore basic auth/ssl with nginx