Protect /admin/

Currently, the admin interface is open to the public.
For a first iteration, we will implement security via BasicAuth, but in the end, it would be nice to have if we had full-blown symfony user authentication