handle x-forwarded for and x-real-ip headers