KEYCLOAK-699 Set maximum size of qr-code
KEYCLOAK-703 Check valid origin is passed to login-status-iframe

Conflicts:
	services/src/main/java/org/keycloak/services/resources/TokenService.java
KEYCLOAK-700 Check path is valid in account/login-redirect
KEYCLOAK-765 Check signature on state in social callback
Merge pull request #781 from stianst/Branch_1_0

Fixes