Use req.ip as remoteKey (we might be behind a proxy (in prod))