use req.ip instead of remoteAddress for ssl urls