#13 unit test for one-time-key