Allow unauthorized passthrough from Auth Proxy to upstream API

[hkeeler]

mod_auth_openidc's default behavior is to require an authorized user prior to proxying to underlying APIs. This is not the model we originally intended for HMDA Platform API, where we wanted to make all authorization decisions in the API code. Let's see if we can get back to that model under mod_auth_openidc.