Not listening on localhost?

[gavincarr]

Although the URLs in the server startup messages all specify localhost, the calls to Listen do not, so I think you're listening on all interfaces rather than just localhost?

(Noticed while adding support for host config items to override localhost)