changed default to more secure loopback interface

Binding to all interfaces is 'insecure by deault', beside also being somewhat too greedy. It also makes it harder to work on the spark code while also, say, running a spark project. Loopback interface seems like a more reasonable development default and in production, a specific external interface is usually selected/configured.