correct links when behind proxy; fix security configuration