Add otp secret to user handler