Add http-server for dev

Loading local assets is a security issue.
Loading through localhost is fine.