add javascript logic to hide the qr code by default to prevent over-the-shoulder-scanning