working on changes to allow builder/webapp to communicate without SSL

The idea is that if we are using an ssh tunnel for communication,
then implementing SSL in the builder/webapp is unnecessary.
Not sure if this will be useful.
if not using SSL, allow connections only from localhost and host's IP

This is kind of cheesy: the webapp is still listening for
connections from all sources.  It would be nice if there were
a way that a single server socket could listen on a specified
SET of addresses.  (Actually: probably JUST listening on the
host IP as determined from the cloudcoder.submitsvc.oop.host
property might work.)
Merge remote-tracking branch 'origin/allow-no-ssl'