Which headers are essential for reliable SSE behind proxies?