Merge pull request #1 from loki36/dev

add two factor authenticator
Merge pull request #2 from loki36/dev

try to fix ajax bug token expire
Changed path to password-image

Doesn't show the image when ownCloud is accessed from a subdomain. E.g. cloud.domain.org an not www.domain.org/owncloud/
Spelling
Typo
Spelling
SECURITY: Block direct access to files

User QR-Codes and [username].db cannot be accessed anymore from a direct URL call.
Merge branch 'master' of https://github.com/stonerl/user-otp into stonerl-master

externe merge