Make cli bound to localhost in default configuration

Even if the default users file is empty, it's still better to avoid exposing by default a service to the wide internet...