fixes bug 989055 - django rate limiting should honor X-Forwarded-For

@rhelmer r?

It looks big because I also upgraded to the latest django-ratelimit

(cc @jsocol)