Use FORWARDED_FOR regardless of source IP