add host header if missing
don't reject private IPs (192.168.x, 10.x, etc)

both Rack & Rails reject these IPs by default from the forwarded
IP header fields. since we are always running behind a reverse
proxy (like nginx) and we certainly may run behind a firewall, we
need to capture these IP addresses correctly.