Enforce session logout if IP address changed

Fixes #179