I think xat is too protective. I know it's good to have security, but this country/ip/browser restriction is a bit too much.
I travel a lot, because I'm an abroad worker. I work in Switzerland, then in the end of month I go to my home country Bosnia (just 1 hour of flight between this countries). And this country restriction is boring me, because I can't trade or do something, because I'm always in this unnecessary held for location changing. My suggestion is to remove all that "security" because it pointless for many users in Europe, as we work abroad usually. Facebook, Twitter, Gmail and similiar big websites are not boring like xat with this security. So please remove that bad security system, and just leave the "Google Authenticator" option if someone wants 2-step security.
I'm tired of same process of opening tickets for location update, and the same boring questions again and again (your old internet provider, new location, which payment method did u used..bla bla)
Thanks for reading.
Edit: Better you make option there or a button "Disable all security", with this warning "Are you sure you want disable all security" and finito. No held, no security for us that we won't this xat security.