Add uniqueness contraints to enforce one *OTP device per user.
Make otp_init() race condition safe.

A race condition in get_or_create() may have resulted in two devices
created per user. Now we guarantee only one. Not that it matters real
much...
Make SSL cert auth user creation race condition-free.