Remove registration from within Tomahawk as it's not supported. Use
nonce and check values. Display meaningful error messages when
authentication fails. Update URL for password logins. Add OTP field for
those with enabled accounts.