Feature: Add otp login method

This feature allow FAS to accept OTP as an authentication option from third-party client.

Note that you can still use OTP from login form as before, this one is still supported
for now.