fix(security): authenticate Cloudflare tests and restrict streaming proxies (#2413)