client.html: allow QR code redisplay only via https: (#136)

Secure authentication on port 8888 required.