enable / with client IP detection (respecting x-forward-headers)