Fixed problem where an user could use twice the first OTP key