Use req.ip for remote addr.

closes gh-1
version bump