bug: Store ips of the user in the db along with token, make sure token is valid for that ip

[hkirat]

If someone steals my jwt, they should not be able to access my dashboard
we should check if the ip is the same as the one they logged in with

[ItsFlash10]

on it, trying

[farjad-akhan]

On it! #trying

[MeerUzairWasHere]

@hkirat We have to add model for IP, where we save all ips or just one more column in user table?
and we can stop him to login if ip are not same?
but we have to remove the ip from db when user logout from that device?

[NawinKumarSharma]

@hkirat , do we need to save ipAddress in session or userschema?

[devsargam]

@hkirat do we want this? really