GUI-1085

check x-forward header before using remote_addr on requests