Switch Tomcat valve settings for remote IP

Most front end load balancers will populate x-forwarded-for, and that's
probably the best we can do (it's only used for reporting anyway)