Replaced REMOTE_ADDR changing middleware with a more secure one.
HTTP_X_FORWARDED_FOR var really can't be trusted. :-)