Server should listen on localhost by default

[retpoline]

When you start the app, it says goto http://localhost:3230 to use it, which may lead users to believe it's listening on the localhost interface, but by default it's actually listening on the network interface. Without authentication, it's probably better that it listens on the local interface by default instead with the user having the ability to configure it to listen on the network.

Not a bug per-sa, but just a security hardening and UI suggestion.