Let's not add another authentication method. Please use Authlogic for authentication!
If you want an IP-based ACL, please consider using the web server access control framework (like [this](http://httpd.apache.org/docs/2.2/howto/access.html))