ref #101: if availabe, use X-Forwarded-For header instead of request.remote_addr for the session protectin id
Merge pull request #102 from noise/master

If available, use X-Forwarded-For header instead of request.remote_addr for the session protectin id
Add config options to disable login managers.
Clarify documentation on disabling logins.
Merge pull request #104 from porterjamesj/login_disable

Add options to disable the login decorators.
version 0.2.6