Any reason we shouldn't `split(',')` on the 'X-Forwarded-For' to turn it into a machine readable array of IPs?