Security controls

Authentication policy, IP allow-list, security alerts and active admin sessions.