* only listen to localhost for security reasons * don't print debug logs for every call * don't use the _internal db