allow localhost redirects with config value

fixes #144 
This function is what Travis was barking about: https://travis-ci.org/mozilla/fxa-oauth-server/jobs/36620427#L441