New SSL cert

this one properly identifies the server as `localhost` so that trusting
the cert via the keychain will persist across browser restarts