I highly suggest not using basic auth for the console route, lets just stick to persona SSO, allowing only Admin accounts.