Issue/31

Fixes #31 

- Added extension method on IPAddress to determine whether it's in the private address space.
- Added extension method on HttpRequestMessage to derive the client IP address.
- Updated the log entry for invalid tokens to include the client IP.