rewrite: live rewrite: switch to including all headers rather than a whitelist for proxying
rewrite: disable refer-redirect in case of POST, handle request w/o redirect
(can't use 307 because of FF)
rewrite: fix <base> rewriting, urlrewriter replacement
turn off lxml rewriter by default