check a custom header for ip to rate limit
v1.5.4
only add a trailing slash to appUrl if it isn't already there