improved ip interceptor by setting first getRemoteAddr ahead of headers checks