added tests for X-Forwarded-For header