don't open the browser in the single-user server
spawn with sudo

instead of setuid

allows better restricted access, and doesn't require the user to be root.