Password protected

Sign in to the QR manager

Manager sessions last 90 days and protect every /qr page and /qr/api endpoint.