added middleware for x-forwarded-for request header for heroku and servers behind proxies