Modifying authorization replies by a proxy