r2615: fixed a bug in the server side support for CONNECT level security