R6230 not requiring password to login

The setup I was hoping for would allow the following

  - X4S R7800 login via LAN IP from local network - this works of course, with caveat 1 below

  - X4S R7800 login via WAN IP (remote management) - this works, with caveat 1 below

  - AC1200 R6230 login via LAN IP from local network - this works of course, with caveat 2 below

  - AC1200 R6230 login via X4S WAN IP forwarded with PAT to R6230 LAN IP - this works, with caveats 2 and 3 below

wrt my original post, I was using the same admin password on both routers, and I think ultimately this led to some authentication caching problems in the browser - I've found that if I'm very careful to always Logout I can't recreate the problem of a password not being required, regardless of how I reach the R6230

Based on the discussion above and further consideration, I've realized this would be terribly insecure:

caveat 1: local and remote management via https with the self signed R7800 certificate is not secure

caveat 2: https is not supported on the R6230 LAN IP at all, regardless of local or forwarded connection

caveat 3: if I login to the R6230 via the same WAN address as the R7800 I get a warning about another active login, which is wrong, and I think is related to my earlier belief that passwords were not being required because of auth caching problems and browser cookies

Oh well, lessons learned, hopefully someday Netgear will add proper certificates with proper TLS support for admin login

thanks to everyone who pitched in!