ref #101: if availabe, use X-Forwarded-For header instead of request.remote_addr for the session protectin id
Merge pull request #102 from noise/master

If available, use X-Forwarded-For header instead of request.remote_addr for the session protectin id