Allow http://localhost:* also to request tickets

Otherwise development is a nightmare.
Implement RFC 4537

Tested by forcing the KDC to give us a DES key and negotiating up to
AES.