Proxy enhancements

Bugfix: `login_required` was not being honored when set to `false` because DN would blow up looking for the htpasswd file. I created a pass-thru auth db that gets used when `login_required===false`.

Enhancement: if the `X-Forwarded-For` header is present, use it when `login_required=== false`.