add a new layer of security which allows for the insertion of a new header which also must pass the is_internal() check for setting the IP of the request