Added x-forwarded-for to :remote-addr token

(Issue #2)

Is there a reason this wasn't implemented?

If there are security concerns, perhaps this could be added as a separate token (`:forwarded-for-addr`?)