initial support for blacklist filters

REST API support complete (needs API tests for release)
new permission for handling filter api
three filter matcher are supported: string, regex and iprange

the blacklist rules are built-in and cannot be updated dynamically. we'll have to see if we want that

missing: instrumentation via metrics

dynamic loading of rules is included here but no API yet, issue #499
fixes #498