use proxy headers for client IP address