modified:   proxy.go: added ssl tunneling through CONNECT