add X-Real-Ip header checking in GetRemoteAddr