use CIDR style whitelist ip addr
add doc env `OPENCLOSET_WHITELIST`
Merge branch '#6-whitelist-wildcard' into develop

closes #6