grab client ip from the correct env variable
security fix: don't cache users auth with duo when the ip has not been detected