simple authentication-checking proxy, check against recras plan.io