HOTP login

Here's a new PR which has been rebased from develop, adding HOTP login.