user: add User.owns_ip() helper to check if a user owns an ip or not