3.2.7: remote api login fails if restricted by remote_ips

After updating to 3.2.7 I have an api client which is failing, with 'Session IP mismatch.'