add trust proxy to work when behind apache