only allow access from whitelisted IPs

to compensate for the extremely poor security of our authentication
system.