test for presence of X-Forwarded-For

tackles #332 by testing for X-Forwarded-For along with testing against the remote address