exclude localhost from redirection so you don't have to rock SSL on your laptop