added remote address check & https check options
docs for allowed_ip / secure