In your cgi.cfg, check the following directives:
If you followed the install/configuration documentation, you probably created an HTTP user called nagiosadmin. If so, the above directives need to be uncommented and nagiosadmin should be one of the values for said directives. You should read the documentation that precedes each directivge to make sure you want to enable it.
Hope this helps...