add "IgnoreIPAddresses" setting that skip http auth restriction.