Revolving around the core of technology
Manuel,
Are you using the latest version of Xeams? I ask because the flag in server.properties about skipping 2FA from localhost was added recently.
If you are already using the latest build, try renaming $INSTALL_DIR\config\TFARecs.dat file to something else. This will disable TFA for everyone; therefore, use this as a last resort.