fix(analytics): check the x_forwarded_for client header

Check for the X_FORWARDED_FOR header when getting the client IP in the analytics module. This is used by some reverse proxies, e.g. Caddy.

Default to REMOTE_ADDR when X_FORWARDED_FOR is empty.

Fixes Analytics -> Locations report showing "Local IP" entries only.