only allow editing on localhost