Ahhh this removes reverse proxy auth for the api!

This is horrible!

While reverse proxy auth should be disabled by default, this is critical. This breaking change makes gitea unsuitable for me going forward.

Reverse proxy auth is perfectly secure when correctly setup and is sensible in many configurations.