auth validation by IP and more