update ipaddr to use X_FORWARDED_FOR