postproxy breaks eap authentication