Hello,
About authentication, it’s not about which library or framework you use. It’s about holding cookies between your curl sessions. Glad you figured it out.
The QR code simply displays the deposit address for each coin. You can get those with the get_coins_info JSON-API call. You will need to use a qr code rendering library to create the qr code image from the address.
with regards