Prevent account sharing/fraud / collect users IPs

This had been discussed here: