* validate the IPs in x-forwarded-for header * switch to only checking one IP * remove newline * changelog