Considering X-Forwarded-Host header if proxy is trusted