Secure cargo Tomcat to restrict access to localhost