Restrict Django sessions to IP/network/user agent