Check BitID via ajax only when we are in the QR page.
Added Access-Control-Allow-Origin header and fixed uri in callback