Fix security hole

Fix security hole by havine BFG/CGminer API listen on localhost only as we don't have password protection on the API