adding x-forwarded-for header check