fixes from UX, restrict IP