Admin handlers totally ignore any cookie or HTTP auth given

This may fix #112.