CanvasMiddleware breaks HTTPS web authentication.