Add support for time based OTPs for two factor authentication.

Hopefully Google won't disable QR Code support in their Charts API any time soon...
expires doesn't seem to be used ever?