in reply to ip_match doesn't seem to work

use CGI::Session qw/-ip-match/;
Change the 2nd dash to an underscore:
use CGI::Session qw/-ip_match/;