Documentation says (http://code.google.com/appengine/docs/java/urlfetch/overview.html#Request_Headers):
These headers are set to accurate values by App Engine, as appropriate
Does the value for X-Forwarded-For included some identity of the gae application?