enhance the verification of locally access by checking
if there is an HTTP_X_FORWARDED_FOR header