I have the same question. I have multiple users on my site and there’s no need to show wordpress specific items like the news and development blog. I’d like a way to remove them, or hide them by default.
This was a bit confusing to me, it doesn’t specify exactly what username and password it wants, but I figured out its the exact same as what you’d use to upload files to your site using ftp. I also had to create an “upgrade” folder in the /wp-content directory and change it’s permissions to allow access. Now the themes and plug-ins pages work perfectly. Hope this helps anyone else who’s having trouble.