Host lockdown

Ensured that the app only runs on `localhost` only.

Added **TravisCI** so that tests run on every push.