change: use x-forwarded-for in blacklist module

in blacklist module, search x-forwarded-for for source IP address. If it
is not there, use the source IP address in the tcp connection.

Signed-off-by: paulyang <y_y@neusoft.com>
bug fix: ip blacklist manager doesn't work after reload

run the manager in a more proper way.

Signed-off-by: paulyang <y_y@neusoft.com>
change: cancel session redirect request when create session, insert "Set-Cookie" header in response directivly

Signed-off-by: jason <liu_yt@neusoft.com>
change: add ajax bypass to robot mitigation

Don't challenge ajax request in robot mitigation module by default.

Signed-off-by: paulyang <y_y@neusoft.com>
Merge branch 'master' into session_update
bug fix: session manager doesn't work after reload

Signed-off-by: jason <liu_yt@neusoft.com>
change: support try file directive

Signed-off-by: paulyang <y_y@neusoft.com>
Merge branch 'master' into session_update