Bear in mind though that any machine that allows ssh connections will also allows users to connect to any port as if they were on the local machine and tunnel it to their remote machine. They will need an ssh login though.

Probably not a problem but it might still be worth having a username and password prompt on the web interface 'just in case'.