Quixote 2.1: quixote/config.py missing check_session_addr

I was experimenting with quixote/config.py from Quixote 2.1 and found the
dump() method raises an Attribute error unless check_session_addr is
explicitly defined in the arguments to instantiation of a Config instance.
The root cause is that the global variable CHECK_SESSION_ADDR is not
defined. The same is true of 2.0, but the CHANGES file suggests
CHECK_SESSION_ADDR was removed between 2.0a5 and 2.0. Looks to me like the
config_vars list shouldn't include the string 'check_session_addr' (line
107).

I'm a newcomer to Quixote and at first, I thought the Config class defined
in quixote/config.py was deprecated, but I see it is imported by both
publish.py and publish1.py, so I assume this error is worth addressing.

Since CHECK_SESSION_ADDR has been removed, is there a standard method for
requiring that a given session cookie always is submitted from the same IP
address (I haven't examined the session code yet) or has this been discarded
as a bad idea? There was a discussion on this topic on the mod_python list a
few months back, but I didn't find one applying Google to the Quixote-users
list archive.

-al
Al Pacifico
Seattle, WA