Guard the reverse proxy under the classic Garg Authentication scheme

While doing this, I have also fixed a bug in the current implementation
of ThrowAll (formerly named `throwAll'`).