diff --git a/plugins/proxy-auth/index.php b/plugins/proxy-auth/index.php
index ec0a40f6b..1f17f32b2 100644
--- a/plugins/proxy-auth/index.php
+++ b/plugins/proxy-auth/index.php
@@ -118,7 +118,7 @@ class ProxyAuthPlugin extends \RainLoop\Plugins\AbstractPlugin
 		if ($sProxyRequest) {
 			/* create master user login from remote user header and settings */
 			$sEmail = $sRemoteUser . $sMasterSeparator . $sMasterUser;
-			$sPassword = \trim($this->Config()->getDecrypted('plugin', 'master_password', ''));
+			$sPassword =  new \SnappyMail\SensitiveString(\trim($this->Config()->getDecrypted('plugin', 'master_password', '')));
 
 			try
 			{
diff --git a/plugins/proxy-auth/js/auto-login.js b/plugins/proxy-auth/js/auto-login.js
index 6d2c72b1c..ba5e0e617 100644
--- a/plugins/proxy-auth/js/auto-login.js
+++ b/plugins/proxy-auth/js/auto-login.js
@@ -11,11 +11,11 @@
                 ForwardProxyAuth = () => {
 		    if (auto_login) {
                         var xhr = new XMLHttpRequest();
-                        xhr.open("GET", "/?UserHeaderSet", true);
+                        xhr.open("GET", "?UserHeaderSet", true);
 
                         xhr.onreadystatechange = function () {
                             if (xhr.readyState == 4 && xhr.status == 200) {
-                                window.location.href = "/?ProxyAuth";
+                                window.location.href = "?ProxyAuth";
                             }
                         };