Refactored OATH token handling

OATH seeds are now safely stored and authenticated in the new authentication backend.
OATH AEAD are generated by the dashboard and can only be verified using the backend.