Added X-Forwarded-For to pass client IP to backend