Trust "forwarded for" http header when connections are from "localhost"