handle X-Forwarded-For headers