added readme note for localhost-only via spring-security-core
Merge pull request #9 from zyro23/spring-security-localhost

added readme note for localhost-only via spring-security-core