fix sendfile with SSL
add missing cli = --x-forwarded-for-hdr option