proxy: set "X-Forwarded-For" header

Still need to add a way to opt-out of it (patch welcome)...

Closes #2.