don't complain about localhost when checking security of index links

based entirely off of Guy Rozendorn's work in PR #1718
Merge pull request #1967 from r1chardj0n3s/insecure-localhost-exception

don't complain about localhost when checking security of index links