uses req.ips for IP testing with trust proxy