Allow restricting access to the admin pages to a specific protocol,

to allow those serving API calls over both http and https to avoid
insecurly using http basic auth over http