Rename Totp stuff to generic terms useful for passwords too.
Generalize out TotpToken and PasswordToken classes
Implement adding passwords
Add proper testing