Lock down the http interface a little more

- Bind the web interface to localhost
- Restrict allowed machines to localhost or user:pass

Fixes rcbops/chef-cookbooks#609