bind local callback server to configured host, not all interfaces

[arib06]

LocalServerReceiver.getRedirectUri() starts the HTTP server that receives the OAuth 2.0 authorization code with new InetSocketAddress(port), which binds the wildcard address and listens on every interface, while the redirect URI it hands back only ever uses the configured host (localhost by default), so the code-bearing callback is reachable from the whole network rather than just loopback; binding new InetSocketAddress(host, port) makes the listener match the advertised URI.

• Make sure to open an issue as a bug/issue before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea
• Ensure the tests and linter pass
• Code coverage does not decrease (if any source code was changed)
• Appropriate docs were updated (if necessary)