Fail early on input URLs pointing to localhost/foo

[jonnor]

Silly people sending such urls to the public instance are currently causing workers to fire up, costing money.

May want to allow the port we are running on though, since we use that for testing.
Theoretically when running on own machine, it is valid to use localhost:$someotherport too...
Probably should just make this a config option.