try to handle X-Forwarded-For header for client IP