Move OAuth callback and logout endpoints under /sproxy/*