Trust proxy's X-Forwarded-*