Add flag to bypass whitelist for users

[itismadness]

This would make it easier for staff to test a client on a live dataset to ensure correctness of upload/download reporting without having to painstakingly set up something local.

[undertheironbridge]

Just to clarify : should this be a per-user, or global flag?

[itismadness]

Per user.

It should be done similarly to how track_ipv6 was added in that it will be a column in the database for users table that ocelot will pull in and set for that user.