Fix domain errors?

I dunno. Changes actually made by @Techwraith and @ben-ng
Linter fixes
remove x-forwarded-for header

This is a nice idea, but I can’t really see the practical value.

1. There’s basically no scenario in which the app wouldn’t receive this
header. That makes it useless as a flag.
2. I actually need this header to determine if the request is coming
from our SSL terminator or not. Having flipover always set this makes
that impossible.
3. As far as I can see the value will always be `127.0.0.1` (or
equivalent). What’s the point?