Any username / password accepted.
Server sends Secure-Session-Registration header on login.
Chrome (with DBSC flags) handles registration natively.
Enable chrome://flags/#enable-standard-device-bound-session-credentials