Make the IP check upon session retrieval configurable