Good morning my friend, this is the expected behaviour. I new request will be sent to the server asking for a new secret, every time you click on QRCode link.

After the QRCode be validated with the first TOTP, you don't need to do it again. Of course, if you have some suggestions on changing our workflow or patches, they would be more than welcome.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira