Well, that was embarrassing — I managed to break the admin side of this site for a while this morning. Culprit was over-enthusiasm with the HTTP Headers plugin. I had to edit the
.htaccess file to get back in.
Lesson learnt — don't fiddle with settings if you're not entirely sure what they do or if you need to touch them.