Proxy to exclude cookies unless specified

fixes #1911. 

```whitelist``` takes a string or an array, and proxies the specified cookies upstream.

By default, proxy no longer forwards cookies.