remove ajp and ssl connectors, and force tomcat to only listen on 127.0.0.1