Suggestion - when I put the status up on my software - someone wrote into the blog and suggested that putting passwords on the web page is not a good idea...
In your status page - the mqtt password is in full view. Does it serve any good purpose? If not....