After the fix for
MODE-2340, another bug shows up regarding credentials in the Repository Explorer webapp:
1) start the application & log in with a valid user, browse a repository
2) Logout from the app
3) Press "Login" and in the login form enter any username/password combination.
Those credentials will be accepted and the application looks like that user is logged in (I haven't checked to see if this is just a UI problem or the actual runtime permissions are corrupted)