add spec for X-Forwarded-For behaviour
add /vendor/gems to .gitignore