fix(httpd): require authentication for vault unlock and recovery (#1216)