web authentication gateway using a yubikey otp