no need to handle proxied root request, main page tested
add proxy prefix to auth middleware, update layout link