Default host to localhost when in development mode.

Running Rack apps on `0.0.0.0` in development mode will allow malicious
users on the local network (ex: Coffee Shop) to abuse or potentially
exploit the app. Safer to default host to `localhost` when in development
mode.