Add a hook for updating auth

 * Patched version of otr.js
 * FIXME for abstracting warning injection