Changelog improvements [ci skip]
Restore original remote_ip algorithm.

Proxy servers add X-Forwarded-For headers, resulting in a list of IPs. We
remove trusted IP values, and then take the last given value, assuming that
it is the most likely to be the correct, unfaked value. See [1] for a very
thorough discussion of why that is the best option we have at the moment.

[1]: http://blog.gingerlime.com/2012/rails-ip-spoofing-vulnerabilities-and-protection/

Fixes #7979
Merge pull request #7980 from steveklabnik/issue_7979

Restore original remote_ip algorithm.
Explain the possible precautions
Merge pull request #8706 from steveklabnik/ip_precautions

Explain the possible IP precautions