allow localhost redirects with config value

fixes #144 
Or this?
```js
function isLocalHost(url) {
  return (matchesHost(url, 'localhost') || matchesHost(url, '127.0.0.1'));
}
```