update install instructions
make server listen to localhost only
FIX: Database.rollback was not even mocked.