Get real IP from X-Forwarded-For