I was playing with this the other day and was accessing it through my reverse proxy. Under NO circumstances could I get it to REQUIRE me logged in. Didn't matter what device, I went to its HTTP address and was instantly on dashboard with ADMIN rights to add/delete at will. Does the update that I see today address or fix that issue? I had one account, admin account, and it DOES have a password. Ideas?