use x-forwarded-for if server is behind proxy