kibana proxy security

#RewriteEngine on
#RewriteRule ^/gds/(.*)$ http://localhost:5601/$1 [P]


DirectoryIndex /app/kibana

ProxyPass /app/kibana http://localhost:5601/app/kibana
ProxyPassReverse /app/kibana http://localhost:5601/app/kibana

ProxyPass /app/timelion http://localhost:5601/app/timelion
ProxyPassReverse /app/timelion http://localhost:5601/app/timelion

ProxyPass /bundles http://localhost:5601/bundles
ProxyPassReverse /bundles http://localhost:5601/bundles

ProxyPass /elasticsearch http://localhost:9200
ProxyPassReverse /elasticsearch http://localhost:9200

ProxyPass /status http://localhost:5601/status
ProxyPassReverse /status http://localhost:5601/status

ProxyPass /api/status http://localhost:5601/api/status
ProxyPassReverse /api/status http://localhost:5601/api/status

ProxyPass /api/saved_objects http://localhost:5601/api/saved_objects
ProxyPassReverse /api/saved_objects http://localhost:5601/api/saved_objects

ProxyPass /api/console http://localhost:5601/api/console
ProxyPassReverse /api/console http://localhost:5601/api/console

ProxyPass /api/timelion/run http://localhost:5601/api/timelion/run
ProxyPassReverse /api/timelion/run http://localhost:5601/api/timelion/run

ProxyPass /api/timelion/functions http://localhost:5601/api/timelion/functions
ProxyPassReverse /api/timelion/functions http://localhost:5601/api/timelion/functions

ProxyPass /plugins/kibana/ http://localhost:5601/plugins/kibana/
ProxyPassReverse /plugins/kibana/ http://localhost:5601/plugins/kibana/

ProxyPass /plugins/timelion/ http://localhost:5601/plugins/timelion/
ProxyPassReverse /plugins/timelion/ http://localhost:5601/plugins/timelion/

ProxyPass /app/sense http://localhost:5601/app/sense
ProxyPassReverse /app/sense http://localhost:5601/app/sense

ProxyPass /ui/fonts/open_sans/ http://localhost:5601/ui/fonts/open_sans/
ProxyPassReverse /ui/fonts/open_sans/ http://localhost:5601/ui/fonts/open_sans/

ProxyPass /es_admin/ http://localhost:5601/es_admin/
ProxyPassReverse /es_admin/ http://localhost:5601/es_admin/

<Proxy *>
        Order deny,allow
        Allow from all
        AuthType Basic
        AuthName "Password Required"
        AuthUserFile /etc/apache2/passwd/passwords
        AuthGroupFile /etc/apache2/passwd/groups
        Require group usergroup
</Proxy>