properly handle x-forwarded-for from nginx