Development server is now listening on 127.0.0.1 by default

It is safer to have it not listening on all interfaces by default.
Modify documentation accordingly.
Minor INSTALL.md change