manage the X-Forwarded-For header: pass it to CGIs and log its first field