Don't do the check the list if there is no IP white list during ip lock

[ivanteoh]

Problem

During the IP white list is empty, the user could be lock out and can't login due to the IP address is not in the white list.

Solution

• do not check the list if it is empty
• make the ip address lock as option