Respect HTTP_X_FORWARDED_FOR and HTTP_X_REAL_IP variables for session IP check