disable IP check for the auth cookie