Add IP-based policies

Migrated from: https://tracker.clearos.com/view.php?id=793

Reported by: Peter Baldwin

The content filter engine can use IP-based policies instead of groups (groups of users).

Using IP addresses is not a secure way to guarantee authentication, but this methodology is very useful and practical in some circumstances.