changed default to listen on localhost only