Throttles now use HTTP_X_FORWARDED_FOR, falling back to REMOTE_ADDR to identify anonymous requests
Merge branch 'master' of https://github.com/tomchristie/django-rest-framework