- listen on 0.0.0.0 so we can connect with our hostname instead of
  localhost to avoid DOM security exceptions