SECURITY: allow UI endpoints to use access token authentication

Created by: slimsag

Please see individual commits for details.

This change is for supporting https://github.com/sourcegraph/sourcegraph/pull/800

This PR does not need to update the CHANGELOG because very minor changes, not worth mentioning.