I have the same issues.
Everything was working perfectly with 1.1 and still works perfectly internally.
I had done everything Josh had done, but I had also tried putting a hostname block for *.duosecurity to try and stop it going through the url rewr...