Modifies the address filtering to work with REST

Moves the allowed check to the SettingsController and adds the filter so
that when IP address filtering is active the requests will return a 403
error