Authentication for admin endpoints

FYI. If auth-tokens are enabled, ACLs with accessJWT token will no longer work in v20.07.0:

This worked fine before together with v20.03.4.

As far as I can tell, the message from server.go indicates that metadata auth-token is not there, despite that it was configured: