* [WEBQR_WEB] Simplifying assumption: user names are session IDs. There are not logged in / authenticated users for now.
* [WEBQR_WEB,EXT] Enpoints are now absolute URIs (used to be locations).