admin interface no longer accessible with BasicAuth

since 3f430855 , any attempt to reach /admin results in a redirect to the landing page.

The underlying issue is that without returning a 401 status, the browser won't prompt the user for credentials, and thus the BasicAuth headers will never be set.