Add both HTTP and HTTPS listeners.

Otherwise securing some resources requires everything to go through HTTPS.
Bind address and secure (HTTPS) port settings.

0.0.0.0 will bind to all addresses; 127.0.0.1 only to loopback.