Document security considerations for forwarded headers in cloud deployments

[bclozel]

We should highlight that while "forwarded headers" support is enabled automatically for cloud platforms, we generally assume that apps are behind trusted HTTP proxies. If this is not the case, app developers should disable this feature if they choose to expose the application to direct Internet traffic.