Add more details on the localhost auth bypass