HTTP_X_FORWARDED_FOR the real variable name in the http header

The HTTP_X_FORWARDED_FOR http header name is 'X-Forwarded-For', so we should use
<%=request.getHeader("X-Forwarded-For")%> to get the real i want.