fixup! Add server-side otp preauth plugin