Update user otp secret api