Allow for multiple IP address in security access_control rules

Should fix #146