HOTP authentication strategy for Passport and Node.js.