Block all HTTP access to management interface if there is a realm defined and it does not have users defined.

Will add some form of filter to the HTTP interface to redirect to a descriptive error page when there is no user defined.