Audited IP needs to be the one originally making the request, not the load balancer's