Added wrap-params middle-ware
Removed hidden fields of authenticate-form.
Using session instead
Show totp code on signup
Fairly critical improvement to logic
Change totp code form
Remove hardcoded from values