log x-real-ip or x-forwarded-for, closes gh-6