No longer blindly trust the X-Forwarded-For header