only serve files internally for better security

This patch forces access to be through 127.0.0.1 unless the --external flag is
used. That way simple use of servedir doesn't expose everything on your machine
to the rest of the network.