handle X-Forwarded-For header on client side