preferring x-forwarded-for over remote_addr for varnish config