Update hotp.js

support crypto-js 3.1.2