Feature request: Add ability to generate a session token that is linked to IP address

## What?

We would like to place a feature request regarding session handling. We would appreciate if it would be possible to configure session binding to the initiating ip of the session. This means, that if the client ip gets changed e.g. switching from cable to wlan that the session is not valid anymore for this client and a user has to relogon. This should be optional and it should be possible to use this feature behind an reverse proxy like apache or nginx with configured x-forwarded-for.

## Why?

Benefit: Even if the session id gets leaked an attacker can not use this information to gain access to graylog interface.

Customer feature request from HS864574772.