store user ip address in active users
ban ip at app level
Merge master into develop