listen only on localhost and add request metadata logging