Avoid sending confidential user secrets to external site via image include

Avoid sending confidential user secrets to http://qrcode.kaywa.com by us...ing the MIT-licensed https://github.com/davidshimjs/qrcodejs library for pure browser goodness.