RESTFul services server binds to *, not localhost