Proxy shouldn't require auth because it's not really possible to handle that in clients across domains
Imagor leaves out the protocol in the proxy URL, therefore the proxy has to re-add it. Given that SSL is quite common nowadays using https:// should be fine.
I've missed a few things in #1126:
https://
should be fine.