Allow whitelisting the CDN for trusting the X-Forwarded-* headers
Merge pull request #272 from dstufft/x-forwarded

Allow whitelisting the CDN for trusting the X-Forwarded-* headers