small amount of work on totp
lots of work on auth
more work on psk