use x-forwarded-for if present, fixes #4