Allowlist resource matches wrong entry on Read

[erademacher]

Fixed a logic error where we were checking if the IP address OR the CIDR mask matched instead of the address _AND_mask. Added a regression test.

[erademacher]

TFTR!