use req.ip instead to detect IP
enable trust proxy to make it work on heroku
[npm] add scripts start command