Fix various issues, including serious configuration problem

Previously the module could be configured to be effectively disabled
by enabling IP restriction for Admin pages and "redirect_to_admin"
access denied action. Fixed by introducing a new default option to
exit with a 403 Forbidden header and no message.

Smaller fixes to configuration settings and IP range handling.