Allow app to be run locally

(but possibly not over https)