wms proxy

DO NOT MERGE or MERGE AT YOUR OWN RISK!

Down the rabbit hole, a suggested fix for #946. I saw that authenticated geoserver requests go via the proxy controller, so why not just run them all through?

Have a crack at:
http://dfruehauf.emii.org.au

Still more work to be done here. I think that in general there should be a designated `openlayers` proxy in addition to the ProxyController.
This seems odd to me. I wouldn't expect two `?`s in a URL. Are we missing URL encoding here?