Added password token to use inplace of plain-text password for totp