removed X-Forwarded headers since we are behind varnish which sets them already