Fixed pairings, bind to localhost

This release fixes the two minor issues that could cause wrong pairings. It also fixes the web server for the UI so it only listens for connections from localhost.

Still not recommended for actually running tournaments, for basically the same reasons as the previous release.