some testing with one time passwords