Added a global config option for IP-based session protection.
The new setting defaults to true, and is settable in the web admin panel. When set to false, IP address checks are ignored. For users behind proxies (students, large corporate networks) that don't guarantee a consistent IP, this makes the web admin panel much more usable.