refactor string extensions to make methods intent more clear
extract key configuration into object
add otp authentication against Yubikey Validation Protocol Version 2.0