I tried creating a new user, checked those boxes and now it works!

I noticed that if I don't have the boxes checked I get a 403 Forbidden rather then 401 Unauthorized which seems correct.

The first user I created still doesn't work, but that's not an issue for me.