added notes about x-forwarded-proto