Link otp-sha1 to match real challenge prompt, not otp-sha

MFC after:      1 week