Optional authentication of certificates of completion

[kcargile]

A certificate authentication mechanism must also be provided, e.g. using a QR code embedded on the certificate, such that third-parties can verify the validity of the certificate. This feature should be configurable, such that an administrator can enable or disable it. The default state should be disabled.

Blocked by #11.