client.html updates (#136 et al.)

1. Redisplay QR code for existing account if needed (master
authentication required)
2. More security enforcement
  a. First account on new steward must be master
  b. Master authentication required to create any new account
3. UI tweaks.