resolves #1, moved toggleOneTimePassword action into separate class