Add -r=1 flag which will send any HTTP redirects received from upstream proxy back to the client.  This is used by squid and other proxies to redirect to an authentication portal