Allow users to view the TOTP secret as a base32 string if they can't read QR codes

Fixes #162
Async search

Tells the user to wait while we search in the background.

Currently there is no auto-refresh

Fixes #170
Oops, left a debugging `countdown` on apply_async
Enable HEAD requests to simple JS callback thingy
Set query on head request too
Fixes #172

I don't like havving `action=""`, but it seems to be the most popular way of doing it these days
JS helper for searching.

We curtailed our Rossuming, sallied forth, and infilrated this place of callbacks to negotiate some client-side asynchronicity
Timeout quicker on initial get request
Move random strings to view class