log IP addresses and support skipping Google Auth

[ryanfb]

No description provided.

[ryanfb]

In thinking this through a little more, there's a whole tangle of problems that we avoid by just using Google Auth. If we want un-authenticated people to be able to contribute, we need to avoid them being able to impersonate other people just by putting in whatever name/e-mail they want to (so we'd need some sort of e-mail confirmation process and/or password system).

We could use something like Auth0, Stormpath, or Amazon Cognito to handle the heavy lifting for authentication.