…-chunked-requests

Don't use #eof? when parsing multipart

Sometimes proxies make requests to Rack applications, for example
HAProxy health checks and so on.

Previously the forwarded IP implementation ate up these IP addresses,
making it hard to tell in Rack applications who made the request

Backport: Preserve forwarded IP address for trusted proxy chains

This will avoid all session to be invalidated.

…values

Third-party session store would still need to be chaged to be more
secure but only upgrading rack will not break any application.