One problem you're probably going to run into is caches (especially caching proxies) ignoring your nocache header, causing users to see the wrong QR code.
A standard way to avoid this is by making the image URL http://lilqr.com/qr?rand=[nonce], where you'd generate the nonce randomly on each page load. You can ignore it on the server of course.