restrict _stats to localhost; improve whois parsing; add minimum token length; print error on failed tunnel connect