allows access to api only from localhost and configured IP-Pattern