[Fixes #11] Fixed 404 response when OTP is invalid, added correct on failure redirect with _otp_failure=1 parameter.