Do XFF appends, use pass for POST requests

Change-Id: Icf85552e900080c077eff78485ad1db0973e5808