Start of authentication bouncer (it accepts proxied requests and bounces those that don't authenticate).