Design the TOTP as independent component

Added status 999 as flag to skip interation-step

TOTP is based on previous identity checked
TOTP is sensible to users-totp and users-no-totp