title: make api call only listen to localhost
body: <p>I have an website which is constructed to use api calls in the same node project. I want the most of these api calls only be available to the localhost website.</p>
  
  <p>Isn't there an option for not using oath and just listen to localhost?</p>