passthrough options to node-http-proxy

adds `--insecure` and `--no-prepend-path` for `secure: false` and `prependPath: false`, respectively.
I should clarify the message. It does what it's supposed to do in terms of relaying the flag to nhp, but that's not actually what the nhp flag does.