allow localhost redirects with config value

fixes #144 
One last thing Sean: we should have a corresponding set of tests for `127.0.0.1`.