Hi Jay,
well, I have to admit I didn't think through it entirely but I guess you're right.
On the other hand though, the question is whether users actually need to have access to the TVH web interface at all:
For me, only the admin needs to have access here - in order to setup the users and stream profiles.
Once that is done, "users" (in the sense of clients like Kodi's TVH client) will access the services in order to consume them. So there is actually no real "user" behind them. It's users of client frontends which again "use" the services of the TVH server, but not the server (web interface) itself.
Not sure if you get what I mean. Anyways, the situation might be different for you and as I said - I didn't think of all the implications. I'm just glad it finally works for me.
Cheers, Thomas