Add more details on the localhost auth bypass

Signed-off-by: Sam Kleinman <samk@10gen.com>
edits to localhost bypass