seed proxy: include client headers, as well as x-forwarded-{proto,host}
seed: allow dashes in app names