proxy.conf: Use an exact match for /auth

Not that I expect this to conflict with anything in our main
namespace.  I'm just doing this so that it's more obvious that there's
just the one auth endpoint.