[webui] apply require_login for most patchinfo editor routes