With `lineman run` the app can only be accessed from _http_://localhost:[port] This makes it nigh impossible to develop apps that tap oAuth2 systems that require the calling app to be secure.