Last Sign In and Current Sign In do not reflect X-Forwarded-For when proxied

Summary

Both show 127.0.0.1 when the last login was via web UI.

Steps to reproduce

Proxy behind apache on same box. Log in and view the user page in admin section.

Example Project

NA

What is the current bug behavior?

Shows 127.0.0.1

What is the expected correct behavior?

Shows the proxied address.

Results of GitLab environment info

Running 9.4 CE, source install, ubuntu.

Possible fixes

If 127.0.0.1 is in XFF - it should be ignored.