Parse checks corrupt otp

These patches update Parse() to validate the CRC of the token, and return ErrCorruptOTP if the CRC check fails.

It also updates some tests to use tokens with valid CRCs.