Basic auth

rack-reverse-proxy supports basic auth, so this essentially passes on a config.

The `preserve_host`-option is also important, as the cluster can be running behind something that cares about the host. 
I'm ok with changing `elasticsearch` to `elasticsearch_url`, though we need to make sure we have good error handling for the case that it isn't set.