Deny permission for everyone to admin UI, add SlingAuthenticator config