separate func for checking passwords in Editor + Admin
add some form authentication middleware
log in to Editor and Admin using HTML form + Cookie

This is not significantly less secure than Basic authentication
in real terms - use of either should be limited to transport via
HTTPS.