fix x-forwarded-for, which should be lowercase