* Safer/trustable extraction of real ip from request * Fix x-real-ip handling on proxy * fix docs * fix default check