Request IP for, and couple CSR to Client instead of User