Set X-Forwarded-For Header

[jscheel]

Localtunnel should set this header to be a good citizen. I noticed the issue when I was able to access a remote developer's entire filesystem using https://github.com/charliesome/better_errors REPL. They check for the header and hide the REPL if it exists, as they should. Scary stuff.