Add proxy option 'access' for plain|secure|any;
vhost map() renamed to reset()
Handle x-forwarded-... headers. Fix browser redirect loop when access=secure