Email Forwarding: Why It Breaks Authentication and How to Fix It