Add middleware to strip Client-IP headers

See alphagov/whitehall#810 for reasoning
Merge pull request #72 from alphagov/fix-ip-spoofing-errors

Add middleware to strip Client-IP headers