update tomcat's defaults to trust 172.16/12 networks as internal proxies