Two fixes:

1.) The header parsing code in okd was reading off a buffer by 1
2.) Make sure to log the real IP in access logs on errors