*8854* Add config variable to declare X_FORWARDED_FOR header as trusted or untrusted

Use a trusted X_FORWARDED_FOR if you are behind a reverse proxy and control the header; Use untrusted otherwise.