Only use X-Real-IP when coming from localhost

Closes #520
Merge branch 'master' into hidden-service

Conflicts:
	mediacrush/network.py