Basic auth

rack-reverse-proxy supports basic auth, so this essentially passes on a config.

The `preserve_host`-option is also important, as the cluster can be running behind something that cares about the host.