QR code can't be read by legacy browsers

[corbindavenport]

The image link on the QR code is always a secure HTTPS link, not HTTP (even if the client loading the web app is using HTTP). This results in the image not loading when scanned with a 3DS or other legacy device.

HTTPS should still be the default, because the QR code is intended to be scanned with a modern smartphone, but it might be useful to have a method for generating a non-secure QR code for those use cases. Maybe it could be a link under the initial QR code or something.