Enable USE_X_FORWARDED_HOST by default

Docs say "This should only be enabled if a proxy which sets this header is in use", but this should be the case in almost all deployment & vagrant dev scenarios