a pyramid authentication policy based on remote ip address