app: add x-got-forwarded-for