HOTP login for admins

We now also support a way for an admin to reset a user's two-factor credentials (see develop branch), in case the device (for TOTP, their phone) is lost or compromised. We will need to customize this to support HOTP users.