I agree this is most likely to be related to the browser issue. If the "cP" icon shows up in WHM >> List Accounts I would expect the root user to just be able to click that with no additional authentication necessary.
Were you able to test a different browser to see if that is working well?