Check client IP for POST requests (creating data)

[mattdowdell]

In the original design, there was mention of a setup involving two servers, where data would be sent to the first and then passed onto the second server where it would be stored.

As an extra validation step, assuming this plan is still valid, the IP address of the client should be checked against a whitelist and the request should be rejected if it fails.