Currently, the admin interface still uses a very primitive way of authenticating, involving HTTP Basicauth. This should be improved.