Hook the HOTP implementation to the admin (ugly)
Account for a TOTP edge case in tests

Previously, the tests could fail if the TOTP period ended just after
calculating the correct TOTP value, but before authenticating.
Add support for two-factor setting change in the demo
Make the whole demo use Twitter Bootstrap
Mention grid cards in auth form help text