Project restrict by IP

It would be useful if projects could be locked down to IP addresses.

This would allow users to be sure that no access to their infrastructure could be obtained from the general internet.

Ideally this would also allow for optional custom headers being used to pass the IP instead of the connected IP in case access to Osie is being proxied.