added note about trusted proxies

I ran into this in a recently converted 2.0 to 2.1 project.