... and now you understand why the admin doesn't switch from HTTP to HTTPS automatically like the catalog.

You can run the whole Admin as SSL by changing your configure files. Change the HTTP paths to the HTTPS address.