accept a broader definition for localhost when determining whether a password is needed (e.g. using the public ip is now accepted)

What is this for? Is `docs/_config_local.yml` used anywhere?