The QR generation seems to also work when a password is configured

But it's ugly, and some css could be used