why is localhost hardcoded into the config?