only allow localhost to access Solr