Added validateOathTotp method override with a few sane defaults
API changes for OATH related methods