Allow whitelisting the CDN for trusting the X-Forwarded-* headers