add `useXForwardedForAsClientAddr="true"` to `<acl />`

[rrayst]

add attribute useXForwardedForAsClientAddr="true" to <acl />, similar to the exiting attribute on <adminConsole/>

• handle multiple X-Forwarded-For headers correctly
• ignore the last address in the list, as it was added by Membrane itself