Parse the otp from the api response

This allow clients to handle yubikeys on DVORAK environments,
where the code entered by the yubikey is actually converted by
their API.