Add comment explaining why the API binds to localhost only (security by default).
Add comment explaining why the API binds to localhost only (security by default).