check for X-Forwarded-For