fix two factor authentication when creating a new token

Enable to create a new OAuth token even when user enabled two factor
authentication.

References #399