req.connection.remoteAddress overriden by req.headers[x-forwarded-for] if it exists (compatibility with nginx)