TCA can't open captive portals

At the moment, TCA has a button offering to sign-in to a captive portal, but that doesn't do anything.

We should open the unsafe browser instead (if the user opted-in for it) or show some helpful message instead.

The goal of this issue is not to discuss if there are ways to change our current security model wrt. to Unsafe Browser.