cleanup whitespace, only bind webserver to localhost