Use the last IP from `X-Forwarded-For` header

A bugfix release - it's now uses the last IP from the X-Forwarded-For header.
Thank you @dae 🙏