simple reverse proxy, GET only allowed