[minor] fix ip restrictions to use forwarded for header as well