Use X-Forwarded-For headers so API logs include client IP