The HTTP Console documentation states:

If security is configured for a mongod instance, authentication is required for a client to access the http interface from another machine.

We should state that the HTTP Console does not support Kerberos authentication. (i.e. for users running MongoDB Enterprise, which contains Kerberos support.)