Bind Rails server to localhost

Binding the server to 0.0.0.0 (which is the default) is a potential security
issue and not usually required for local development.

See: <http://blog.codeclimate.com/blog/2013/03/27/rails-insecure-defaults/>