add missing cli = --x-forwarded-for-hdr option
fix sendfile with SSL