KEYCLOAK-699 Set maximum size of qr-code
KEYCLOAK-703 Check valid origin is passed to login-status-iframe

Conflicts:
	services/src/main/java/org/keycloak/services/resources/TokenService.java
KEYCLOAK-700 Check path is valid in account/login-redirect
KEYCLOAK-765 Check signature on state in social callback