allow HTTP_X_FORWARDED_HOST to be a list
Merge remote-tracking branch 'mapproxy/master'