Fix security hole

Fix security hole by having BFG/CGminer API listen on localhost only as we don't have password protection on the API