[HttpKernel] added support for the X-Forwarded-For header (closes #6982, closes #7000)