Fix regression in qr.wsgi

The P: field of the QR code was being populated with the session timeout instead of the password