Glassfish requires a different header with client IP when behind SSL terminating proxy