using 'trust proxy' on proxied requests