Whenever you cannot connect to the Web UI (login failed, please try again) and the logs in /var/log/pveproxy/access.log show HTTP 595 errors on access tickets
This is most likely due to failing localhost to localhost communications, try
iptables -A INPUT -i lo -s 127.0.0.1 -j ACCEPT
iptables...