add middleware to detect forwarded client ip; work on #104

Work on #104 

@jgmize, @mlavin Could use feedback on whether or not this leaves us in a potentially [vulnerable state](https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/) and how to mitigate that.