taken from https://code.google.com/p/google-authenticator/