client IP checks optional, support X-Forwarded-For
Merge pull request #12 from airbnb/pierre/ip_check

client IP checks optional, support X-Forwarded-For