read HTTP_X_FORWARDED_FOR from http header