add cert-ignore-hostname, use std::string for proxy-auth header