cache qrcodes; no cache on redirect; log redirect location