read X-REAL-IP from http header